freeipa

#9857 Nightly failure in test_commands.py::TestIPACommand::test_cacert_manage
Closed: fixed by frenaud. Opened by frenaud.

Closed: fixed
Reopen Issue

The nightly test test_commands.py::TestIPACommand::test_cacert_manage started failing sep 15 2025 because of a certificate expiration.

See PR #7933 with the following logs and report:

        # Install 3rd party CA's, Let's Encrypt in this case
        for cert in (isrgrootx1, letsencryptauthorityx3):
            certfile = os.path.join(self.master.config.test_dir, 'cert.pem')
            self.master.put_file_contents(certfile, cert)
>           result = self.master.run_command(
                ['ipa-cacert-manage', 'install', certfile],
            )

The error is:

ipa: ERROR: stderr: Not a valid CA certificate: has expired 2025-09-15 16:00:00+00:00 UTC (visit http://www.freeipa.org/page/Troubleshooting for troubleshooting guide)
The ipa-cacert-manage command failed.

The certificate defined in letsencryptauthorityr3 expires Sep 15 2025.

Metadata Update from @frenaud:
- Issue assigned to frenaud

Metadata Update from @frenaud:
- Issue assigned to frenaud

We can replace with R12, see the updated chain in https://letsencrypt.org/certificates/

We can replace with R12, see the updated chain in https://letsencrypt.org/certificates/

Metadata Update from @frenaud:
- Assignee reset

Metadata Update from @frenaud:
- Custom field on_review adjusted to https://github.com/freeipa/freeipa/pull/7937

master:

  • b73d8f18a65a7615e1052aae8c53d58ca67de8fa ipatests: update the Let's Encrypt cert chain

ipa-4-12:

  • 94493640e10547cd4aff82b017391916149822e5 ipatests: update the Let's Encrypt cert chain

ipa-4-11:

  • 6e11db12fff3464009fc2137f3d4677d8f5bf4c5 ipatests: update the Let's Encrypt cert chain

ipa-4-10:

  • 01479f84daaaf11e9272a1efda75c1878bded1d5 ipatests: update the Let's Encrypt cert chain

ipa-4-9:

  • 8e726dc3273d9f8262274e95cd8cc6ff15b522f5 ipatests: update the Let's Encrypt cert chain

Metadata Update from @frenaud:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)

Metadata Update from @frenaud:
- Custom field rhbz adjusted to https://issues.redhat.com/browse/RHEL-118609

ipa-4-8:

  • 071f8302043906b3c371d5eb7bad164a98f36c41 ipatests: update the Let's Encrypt cert chain
Metadata

test-failure tests

None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.